Audited commands for RDP sessions

PAM Core
1

Hello!

I have Senhasegura 4.0. that I am currently testing in my lab environment and I want to test one particular functionality, which is pattern detection/restrictions in RDP sessions. I have already tested the Audited commands for SSH sessions, they work perfectly, but I wasn’t able to get patterns triggered for RDP sessions, even though I had the simplest regular expression possible just “ipconfig”. So, I was trying to get the command execution prevention in the cmd during the RDP session, but it’s not working.

Question, does Senhasegura only support SSH sessions for this functionality, or are there any additional configurations required for sessions with any protocols other than SSH?

2

Currently Audited Command only support Terminal Session.

hope this help you

3

Hello Almaz Akhmadullin,

The audited commands functionality is currently available only for the following session types:

  • Database Proxy
  • Terminal Proxy
  • Web Terminal (Terminal via Web Proxy)

Unfortunately, this feature is not supported for RDP sessions at the moment.

If you have any further questions or need help with supported use cases, we’re here to assist.